What does "legally binding e-signature" actually mean?

"Legally binding" is the most overused phrase in e-signature marketing. It's also the most misunderstood.

The legal standard

An e-signature is "legally binding" when it meets the attribution, intent, and retention requirements of the governing jurisdiction. In the US, that's eSIGN Act Section 101(a):

> "A signature, contract, or other record relating to such transaction may not be denied legal effect, validity, or enforceability solely because it is in electronic form."

Translation: if it shows intent to sign, identifies the signer, and can be reliably reproduced later, it's binding.

What that doesn't guarantee

"Legally binding" is a floor, not a ceiling. It means the signature can't be dismissed solely for being electronic. It says nothing about:

• Evidentiary weight — will your signature hold up against a determined challenger?
• Tamper detection — can you prove the document wasn't modified after signing?
• Identity strength — did you verify the signer's identity, or just trust an email address?

A typed name in an email is "legally binding" in the strict sense. It's also trivially challenged in court.

What makes a signature defensibly binding

Courts have consistently upheld e-signatures that include:

1. Explicit intent capture — the signer actively chose to sign, not passively triggered it 2. Authentication — multi-factor or at least email-verified identity 3. Audit trail — timestamp, IP, device fingerprint, authentication method 4. Document integrity — cryptographic hash proving the document didn't change 5. Secure retention — stored tamper-evidently for years

SignBolt provides all five by default. DocuSign and HelloSign do too. A "free e-signature tool" that only captures a typed name does not.

The case law

US courts have ruled on e-signatures in thousands of cases since 2000. Consistent themes:

• Barwick v. Geico (2012) — typed names in emails upheld as binding signatures
• Naldi v. Grunberg (2010) — documented electronic assent satisfies Statute of Frauds
• Vista Developers Corp. v. VFP Realty LLC (2007) — email signature with intent enforceable

Courts routinely strike down e-signatures where attribution fails — e.g., shared computers, forwarded email accounts, or platforms with no audit trail.

Your action plan

• For high-stakes contracts: use a platform with PAdES-level signing (like SignBolt)
• For internal approvals: typed names in audited workflows are usually fine
• For anything likely to be disputed: add identity verification (ID check, video witness)

The safest posture: make every signature unnecessarily strong. The marginal cost is ~$0. The marginal benefit is you never lose a contract dispute on the signature alone.

Related: Are e-signatures legally binding? · E-signature audit trail